- Distribution Method : Unknown
- MD5 : ad3ac842d9ea2e5f3b62e43c467faea3
- Major Detection Name : Trojan.Ransom.BugWare (ALYac), Ransom_HIDDENTEARBUGWARE.B (Trend Micro)
- Encrypted File Pattern : .[SLAVIC@SECMAIL.PRO].CRIPTOGRAFADO
- Major Characteristics :
- Hidden-Tear Open Source based Ransomware
- The Portuguese users targeted
- Use an invalid "Spotify AB" Digital Signatures
- Automatically reboot Windows after file encryption is complete
- Changes desktop background (C:\Users\%UserName%\Desktop\wpp.bmp)
List